@de./sdk 1.0.4 → 2.0.0

package/dist/allend/Access.d.ts

@@ -1,15 +1,51 @@
-import type { AccessOptions } from '../types/access';
+import type { AccessOptions, UserSession } from '../types/access';
 import type { HTTPRequestOptions } from '../types';
-type AccessType = 'API' | 'ASI';
+/**
+ * Which service the client addresses.
+ *
+ * De. is more than one server: de.arch answers the API, de.auth the ASI, and
+ * de.workspace the control plane. They are separate hosts, so the client has
+ * to say which one it means rather than assume the API.
+ */
+type AccessType = 'API' | 'ASI' | 'WSP';
 export default class AccessManager {
     private atype;
     private version;
     private platform;
     private baseURL;
+    /**
+     * The client's own `wid:TYPE:xcode`, base64-encoded.
+     *
+     * Not a transport header: de.arch resolves the workspace from the access
+     * token, and its header contract has no context field. It is kept because a
+     * client is scoped to one context for its lifetime, and a caller holding
+     * several — a proxy serving many workspaces — needs to ask which is which.
+     * `scope` decodes it.
+     */
+    readonly context: string;
     protected accessToken?: string;
     protected remoteOrigin?: string;
+    protected session?: UserSession;
+    private timeout?;
     constructor(options: AccessOptions, atype: AccessType);
-    request<Response>({ url, ...options }: HTTPRequestOptions): Promise<Response>;
+    request<Response>({ url, timeout, ...options }: HTTPRequestOptions): Promise<Response>;
+    /**
+     * The context decoded into its parts.
+     *
+     * Every consumer was decoding the base64 and splitting on ':' by hand,
+     * including validating that it produced three fields. Returns undefined
+     * rather than throwing when the string is not a context, since a caller
+     * asking is usually checking.
+     */
+    get scope(): {
+        wid: string;
+        type: string;
+        xcode: string;
+    } | undefined;
     setToken(token: string): void;
+    /** Attach or replace the signed-in user after construction. */
+    setSession(session: UserSession): void;
+    /** Drop the user session — e.g. on sign-out. */
+    clearSession(): void;
 }
 export {};

package/dist/allend/Access.js

@@ -1,15 +1,4 @@
 "use strict";
-var __assign = (this && this.__assign) || function () {
-    __assign = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign.apply(this, arguments);
-};
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -43,122 +32,166 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
-    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-var __rest = (this && this.__rest) || function (s, e) {
-    var t = {};
-    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
-        t[p] = s[p];
-    if (s != null && typeof Object.getOwnPropertySymbols === "function")
-        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
-                t[p[i]] = s[p[i]];
-        }
-    return t;
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-var baseUrl_1 = require("../baseUrl");
-var USER_ACCOUNT_SERVICE = 'De.API';
-var AccessManager = /** @class */ (function () {
-    function AccessManager(options, atype) {
+const baseUrl_1 = require("../baseUrl");
+const error_1 = __importDefault(require("../error"));
+const USER_ACCOUNT_SERVICE = 'De.API';
+/**
+ * Resolve a fetch implementation for the host runtime.
+ *
+ * Node 18+, every browser and React Native all expose a global `fetch`, so that
+ * is the first and usual answer. `node-fetch` remains only as a fallback for
+ * Node versions predating the global.
+ *
+ * The previous check tested `globalThis.window && globalThis.fetch`, which was
+ * wrong for React Native: there is no `window` there but `fetch` is global, so
+ * it fell through to importing node-fetch and broke. Testing for `fetch`
+ * directly is what lets one Access layer serve node, browser and native.
+ */
+async function resolveFetch() {
+    if (typeof (globalThis === null || globalThis === void 0 ? void 0 : globalThis.fetch) === 'function')
+        return globalThis.fetch;
+    return (await Promise.resolve().then(() => __importStar(require('node-fetch')))).default;
+}
+class AccessManager {
+    constructor(options, atype) {
+        var _a;
         if (!options)
             throw new Error('Undefined Access Configuration');
         if (!options.context)
             throw new Error('Undefined Context Reference. Check https://doc.dedot.io/sdk/auth');
         if (!options.accessToken)
             throw new Error('Undefined Access Token. Check https://doc.dedot.io/sdk/auth');
+        this.context = options.context;
         this.atype = atype;
         this.version = options.version || 1;
         this.platform = options.platform || 'proxy';
         this.accessToken = options.accessToken;
         this.remoteOrigin = options.remoteOrigin;
-        this.baseURL = this.atype === 'ASI'
-            ? baseUrl_1.ASI_SERVER_BASEURL[options.env || 'dev']
-            : baseUrl_1.API_SERVER_BASEURL[options.env || 'dev'];
+        this.session = options.session;
+        this.timeout = options.timeout;
+        this.baseURL = ((_a = options.baseUrl) === null || _a === void 0 ? void 0 : _a.replace(/\/+$/, ''))
+            || (0, baseUrl_1.baseURL)(this.atype, options.env || 'dev', options.devHostname);
     }
-    AccessManager.prototype.request = function (_a) {
-        return __awaiter(this, void 0, void 0, function () {
-            var rawOptions, fetch;
-            var url = _a.url, options = __rest(_a, ["url"]);
-            return __generator(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        rawOptions = {
-                            method: 'GET',
-                            headers: {
-                                /**
-                                 * Default User agent for SDK request calls
-                                 *
-                                 * NOTE: Later replace by latest SDK version
-                                 */
-                                origin: this.remoteOrigin,
-                                'de-user-agent': "De.".concat(this.platform, "/").concat(this.version, ".0")
-                            }
-                        };
-                        if (this.atype === 'ASI')
-                            rawOptions.headers['de-auth-service'] = USER_ACCOUNT_SERVICE;
-                        if (this.accessToken)
-                            rawOptions.headers.authorization = "Bearer ".concat(this.accessToken);
-                        if (options.body) {
-                            rawOptions.headers['content-type'] = 'application/json';
-                            if (typeof options.body === 'object')
-                                options.body = JSON.stringify(options.body);
-                        }
-                        if (typeof options.headers == 'object')
-                            options.headers = __assign(__assign({}, options.headers), rawOptions.headers);
-                        options = __assign(__assign({}, rawOptions), options);
-                        url = "".concat(this.baseURL, "/v").concat(this.version, "/").concat(url.replace(/^\//, ''));
-                        fetch = (globalThis === null || globalThis === void 0 ? void 0 : globalThis.window) && (globalThis === null || globalThis === void 0 ? void 0 : globalThis.fetch);
-                        if (!!fetch) return [3 /*break*/, 2];
-                        return [4 /*yield*/, Promise.resolve().then(function () { return __importStar(require('node-fetch')); })];
-                    case 1:
-                        fetch = (_b.sent()).default;
-                        _b.label = 2;
-                    case 2: return [4 /*yield*/, fetch(url, options)];
-                    case 3: return [4 /*yield*/, (_b.sent()).json()];
-                    case 4: 
-                    // console.log( options )
-                    return [2 /*return*/, _b.sent()];
-                }
-            });
-        });
-    };
-    AccessManager.prototype.setToken = function (token) { this.accessToken = token; };
-    return AccessManager;
-}());
+    async request({ url, timeout, ...options }) {
+        const rawOptions = {
+            method: 'GET',
+            headers: {
+                /**
+                 * Default User agent for SDK request calls
+                 *
+                 * NOTE: Later replace by latest SDK version
+                 */
+                origin: this.remoteOrigin,
+                'de-user-agent': `De.${this.platform}/${this.version}.0`
+            }
+        };
+        if (this.atype === 'ASI')
+            rawOptions.headers['de-auth-service'] = USER_ACCOUNT_SERVICE;
+        if (this.accessToken)
+            rawOptions.headers.authorization = `Bearer ${this.accessToken}`;
+        /**
+         * User-session credentials, sent alongside the bearer token rather than
+         * instead of it. `isConnected` (AUX agent routes) reads only this pair;
+         * `isAuthorized` reads only the bearer. Routes guarded by either one are
+         * then reachable from a single client.
+         */
+        if (this.session) {
+            rawOptions.headers['de-auth-token'] = this.session.token;
+            rawOptions.headers['de-auth-device'] = this.session.device;
+        }
+        if (options.body) {
+            rawOptions.headers['content-type'] = 'application/json';
+            if (typeof options.body === 'object')
+                options.body = JSON.stringify(options.body);
+        }
+        if (typeof options.headers == 'object')
+            options.headers = {
+                ...options.headers,
+                ...rawOptions.headers
+            };
+        options = { ...rawOptions, ...options };
+        /**
+         * Bound the request when a deadline is configured.
+         *
+         * `AbortSignal.timeout` is not in the pre-18 Node the node-fetch fallback
+         * exists for, so this is guarded rather than assumed. A missing signal
+         * leaves the previous unbounded behaviour, which is the right degradation:
+         * the request still goes out.
+         */
+        const deadline = timeout !== null && timeout !== void 0 ? timeout : this.timeout;
+        if (deadline && typeof (AbortSignal === null || AbortSignal === void 0 ? void 0 : AbortSignal.timeout) === 'function')
+            options.signal = AbortSignal.timeout(deadline);
+        url = `${this.baseURL}/v${this.version}/${url.replace(/^\//, '')}`;
+        const fetch = await resolveFetch(), response = await fetch(url, options);
+        /**
+         * Everything De. answers is the `{ error, message, data }` envelope, so a
+         * body that will not parse did not come from De. — a gateway 502 page, a
+         * proxy timeout, an empty 204. Reporting that as a JSON syntax error hides
+         * the only two facts worth having, which are the status and the URL.
+         */
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch {
+            /**
+             * Not De. answering — a gateway's HTML 502, a proxy timeout, an empty
+             * 204. There is no envelope to hand back, so this is the one case that
+             * raises, carrying the status and URL rather than a JSON syntax error.
+             */
+            throw new error_1.default(`${options.method} ${url} — ${response.statusText || 'no JSON body'}`, response.status);
+        }
+        /**
+         * A refusal is returned, not raised.
+         *
+         * De.'s answer is the `{ error, status, message, data }` envelope whether
+         * it succeeded or not, and `status` names the refusal precisely —
+         * SENDER_CAP_REACHED, CONSOLIDATION::NOT_IN_PROGRESS. Throwing that away
+         * and reconstructing it from an exception message is what callers were
+         * reduced to; handing back the envelope lets them read it.
+         *
+         * A non-2xx carrying an envelope is still De. answering, so it comes back
+         * the same way.
+         *
+         * What is NOT De. answering is raised. A wrong path gets Fastify's own
+         * 404 body, which is JSON but not the envelope — `error` there is the
+         * string 'Not Found', not a boolean. Returning that as though it were a
+         * refusal is how a client addressing a route that does not exist would
+         * look like a workspace being told no, which is precisely the bug that
+         * hid `/LSP/invitation/agent` behind a plausible-looking failure.
+         */
+        if (typeof (body === null || body === void 0 ? void 0 : body.error) !== 'boolean')
+            throw new error_1.default((body === null || body === void 0 ? void 0 : body.message) || `${options.method} ${url} — ${response.status} ${response.statusText || 'not a De. response'}`, response.status, body);
+        return body;
+    }
+    /**
+     * The context decoded into its parts.
+     *
+     * Every consumer was decoding the base64 and splitting on ':' by hand,
+     * including validating that it produced three fields. Returns undefined
+     * rather than throwing when the string is not a context, since a caller
+     * asking is usually checking.
+     */
+    get scope() {
+        try {
+            const decoded = typeof atob === 'function'
+                ? atob(this.context)
+                : Buffer.from(this.context, 'base64').toString('utf8'), [wid, type, xcode] = decoded.split(':');
+            return wid && type && xcode ? { wid, type, xcode } : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    setToken(token) { this.accessToken = token; }
+    /** Attach or replace the signed-in user after construction. */
+    setSession(session) { this.session = session; }
+    /** Drop the user session — e.g. on sign-out. */
+    clearSession() { this.session = undefined; }
+}
 exports.default = AccessManager;
 //# sourceMappingURL=Access.js.map

package/dist/allend/Access.js.map

@@ -1 +1 @@
-{"version":3,"file":"Access.js","sourceRoot":"","sources":["../../src/allend/Access.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,sCAAmE;AAInE,IAAM,oBAAoB,GAAG,QAAQ,CAAA;AAErC;IAQE,uBAAa,OAAsB,EAAE,KAAiB;QACpD,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;QAC1G,IAAI,CAAC,OAAO,CAAC,WAAW;YAAG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAEzG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAA;QAC3C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK;YACzB,CAAC,CAAC,4BAAkB,CAAE,OAAO,CAAC,GAAG,IAAI,KAAK,CAAE;YAC5C,CAAC,CAAC,4BAAkB,CAAE,OAAO,CAAC,GAAG,IAAI,KAAK,CAAE,CAAA;IACxD,CAAC;IAEK,+BAAO,GAAb,UAAwB,EAAuC;;;YAArC,IAAA,GAAG,SAAA,EAAK,OAAO,cAAjB,OAAmB,CAAF;;;;wBACjC,UAAU,GAAQ;4BACtB,MAAM,EAAE,KAAK;4BACb,OAAO,EAAE;gCACP;;;;mCAIG;gCACH,MAAM,EAAE,IAAI,CAAC,YAAY;gCACzB,eAAe,EAAE,aAAM,IAAI,CAAC,QAAQ,cAAI,IAAI,CAAC,OAAO,OAAI;6BACzD;yBACF,CAAA;wBAED,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;4BACtB,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,oBAAoB,CAAA;wBAE9D,IAAI,IAAI,CAAC,WAAW;4BAClB,UAAU,CAAC,OAAO,CAAC,aAAa,GAAG,iBAAU,IAAI,CAAC,WAAW,CAAE,CAAA;wBAEjE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;4BACjB,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;4BACvD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;gCAClC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAE,OAAO,CAAC,IAAI,CAAE,CAAA;wBACjD,CAAC;wBAED,IAAI,OAAO,OAAO,CAAC,OAAO,IAAI,QAAQ;4BACpC,OAAO,CAAC,OAAO,yBACV,OAAO,CAAC,OAAO,GACf,UAAU,CAAC,OAAO,CACtB,CAAA;wBAEH,OAAO,yBAAQ,UAAU,GAAK,OAAO,CAAE,CAAA;wBAEvC,GAAG,GAAG,UAAG,IAAI,CAAC,OAAO,eAAK,IAAI,CAAC,OAAO,cAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAE,CAAA;wBAG9D,KAAK,GAAG,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,MAAM,MAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,KAAK,CAAA,CAAA;6BAC/C,CAAC,KAAK,EAAN,wBAAM;wBACE,sFAAa,YAAY,QAAC;;wBAApC,KAAK,GAAG,CAAE,SAA0B,CAAE,CAAC,OAAc,CAAA;;4BAGxC,qBAAM,KAAK,CAAE,GAAG,EAAE,OAAO,CAAE,EAAA;4BAAnC,qBAAM,CAAE,SAA2B,CAAE,CAAC,IAAI,EAAE,EAAA;;oBADnD,yBAAyB;oBACzB,sBAAO,SAAwD,EAAA;;;;KAChE;IAED,gCAAQ,GAAR,UAAU,KAAa,IAAW,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA,CAAC,CAAC;IAC9D,oBAAC;AAAD,CAAC,AArED,IAqEC"}
+{"version":3,"file":"Access.js","sourceRoot":"","sources":["../../src/allend/Access.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,wCAAoC;AACpC,qDAA+B;AAW/B,MAAM,oBAAoB,GAAG,QAAQ,CAAA;AAErC;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,YAAY;IACzB,IAAI,OAAO,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,KAAK,CAAA,KAAK,UAAU;QACzC,OAAO,UAAU,CAAC,KAAK,CAAA;IAEzB,OAAO,CAAE,wDAAa,YAAY,GAAC,CAAE,CAAC,OAAc,CAAA;AACtD,CAAC;AAED,MAAqB,aAAa;IAoBhC,YAAa,OAAsB,EAAE,KAAiB;;QACpD,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;QAC1G,IAAI,CAAC,OAAO,CAAC,WAAW;YAAG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAEzG,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAA;QAC3C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC9B,IAAI,CAAC,OAAO,GAAG,CAAA,MAAA,OAAO,CAAC,OAAO,0CAAE,OAAO,CAAE,MAAM,EAAE,EAAE,CAAE;eAClC,IAAA,iBAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,OAAO,CAAC,WAAW,CAAE,CAAA;IACrF,CAAC;IAED,KAAK,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,OAAO,EAAsB;QACtE,MAAM,UAAU,GAAQ;YACtB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP;;;;mBAIG;gBACH,MAAM,EAAE,IAAI,CAAC,YAAY;gBACzB,eAAe,EAAE,MAAM,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,IAAI;aACzD;SACF,CAAA;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YACtB,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,oBAAoB,CAAA;QAE9D,IAAI,IAAI,CAAC,WAAW;YAClB,UAAU,CAAC,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,WAAW,EAAE,CAAA;QAEjE;;;;;WAKG;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAA;YACxD,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAA;QAC5D,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;YACvD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAClC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAE,OAAO,CAAC,IAAI,CAAE,CAAA;QACjD,CAAC;QAED,IAAI,OAAO,OAAO,CAAC,OAAO,IAAI,QAAQ;YACpC,OAAO,CAAC,OAAO,GAAG;gBAChB,GAAG,OAAO,CAAC,OAAO;gBAClB,GAAG,UAAU,CAAC,OAAO;aACtB,CAAA;QAEH,OAAO,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,EAAE,CAAA;QAEvC;;;;;;;WAOG;QACH,MAAM,QAAQ,GAAG,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,IAAI,CAAC,OAAO,CAAA;QACxC,IAAI,QAAQ,IAAI,OAAO,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,OAAO,CAAA,KAAK,UAAU;YACtD,OAAgB,CAAC,MAAM,GAAG,WAAW,CAAC,OAAO,CAAE,QAAQ,CAAE,CAAA;QAE7D,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAA;QAElE,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,EAC5B,QAAQ,GAAG,MAAM,KAAK,CAAE,GAAG,EAAE,OAAc,CAAE,CAAA;QAEnD;;;;;WAKG;QACH,IAAI,IAAS,CAAA;QACb,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QACpC,MAAM,CAAC;YACL;;;;eAIG;YACH,MAAM,IAAI,eAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,IAAI,cAAc,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAE,CAAA;QAC7G,CAAC;QAED;;;;;;;;;;;;;;;;;;WAkBG;QACH,IAAI,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAA,KAAK,SAAS;YAClC,MAAM,IAAI,eAAQ,CAChB,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,KAAI,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,oBAAoB,EAAE,EAC/G,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAA;QAEH,OAAO,IAAgB,CAAA;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,KAAK;QACP,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,UAAU;gBACxB,CAAC,CAAC,IAAI,CAAE,IAAI,CAAC,OAAO,CAAE;gBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpE,CAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAE/C,OAAO,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,CAAC;QACD,MAAM,CAAC;YAAC,OAAO,SAAS,CAAA;QAAC,CAAC;IAC5B,CAAC;IAED,QAAQ,CAAE,KAAa,IAAW,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA,CAAC,CAAC;IAE5D,+DAA+D;IAC/D,UAAU,CAAE,OAAoB,IAAW,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA,CAAC,CAAC;IAEnE,gDAAgD;IAChD,YAAY,KAAW,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA,CAAC,CAAC;CAClD;AA5KD,gCA4KC"}

package/dist/allend/Agent/consolidation.d.ts

@@ -0,0 +1,16 @@
+import type { AgentConsolidationRespondValidation, AgentConsolidationHandoffValidation, AgentConsolidationCompleteValidation } from '@de./types';
+import { type Http } from '../../utils';
+export default class AgentConsolidation {
+    private http;
+    constructor(http: Http);
+    respond(body: AgentConsolidationRespondValidation['body']): Promise<AgentConsolidationRespondValidation['response']>;
+    handoffConfirm(body: AgentConsolidationHandoffValidation['body']): Promise<AgentConsolidationHandoffValidation['response']>;
+    /**
+     * The receiving rider reporting leg 2 delivered.
+     *
+     * No handoff code — the PIN authenticated the transfer between riders at
+     * confirm. This is what takes the offer out of IN_PROGRESS and returns the
+     * rider to their zone pool.
+     */
+    handoffComplete(body: AgentConsolidationCompleteValidation['body']): Promise<AgentConsolidationCompleteValidation['response']>;
+}

package/dist/allend/Agent/consolidation.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// ─── Agent Consolidation ──────────────────────────────────────────────────────
+class AgentConsolidation {
+    constructor(http) {
+        this.http = http;
+    }
+    async respond(body) {
+        return await this.http.request({
+            url: '/agent/consolidation/respond',
+            method: 'POST',
+            body
+        });
+    }
+    async handoffConfirm(body) {
+        return await this.http.request({
+            url: '/agent/consolidation/handoff/confirm',
+            method: 'POST',
+            body
+        });
+    }
+    /**
+     * The receiving rider reporting leg 2 delivered.
+     *
+     * No handoff code — the PIN authenticated the transfer between riders at
+     * confirm. This is what takes the offer out of IN_PROGRESS and returns the
+     * rider to their zone pool.
+     */
+    async handoffComplete(body) {
+        return await this.http.request({
+            url: '/agent/consolidation/handoff/complete',
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentConsolidation;
+//# sourceMappingURL=consolidation.js.map

package/dist/allend/Agent/consolidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consolidation.js","sourceRoot":"","sources":["../../../src/allend/Agent/consolidation.ts"],"names":[],"mappings":";;AAOA,iFAAiF;AAEjF,MAAqB,kBAAkB;IACtC,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,OAAO,CAAE,IAAiD;QAC/D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAkD;YAC/E,GAAG,EAAE,8BAA8B;YACnC,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAE,IAAiD;QACtE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAkD;YAC/E,GAAG,EAAE,sCAAsC;YAC3C,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAE,IAAkD;QACxE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAmD;YAChF,GAAG,EAAE,uCAAuC;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AAjCD,qCAiCC"}

package/dist/allend/Agent/delivery.d.ts

@@ -0,0 +1,11 @@
+import type { AgentDeliveryListValidation, AgentDeliveryGetValidation, AgentDeliveryAcceptValidation, AgentDeliveryUpdateStatusValidation, AgentDeliveryReportIssueValidation } from '@de./types';
+import { type Http } from '../../utils';
+export default class AgentDelivery {
+    private http;
+    constructor(http: Http);
+    list(querystring?: AgentDeliveryListValidation['querystring']): Promise<AgentDeliveryListValidation['response']>;
+    get(reference: string): Promise<AgentDeliveryGetValidation['response']>;
+    accept(reference: string): Promise<AgentDeliveryAcceptValidation['response']>;
+    updateStatus(reference: string, body: AgentDeliveryUpdateStatusValidation['body']): Promise<AgentDeliveryUpdateStatusValidation['response']>;
+    reportIssue(reference: string, body: AgentDeliveryReportIssueValidation['body']): Promise<AgentDeliveryReportIssueValidation['response']>;
+}

package/dist/allend/Agent/delivery.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("../../utils");
+// ─── Agent Delivery Orders ────────────────────────────────────────────────────
+class AgentDelivery {
+    constructor(http) {
+        this.http = http;
+    }
+    async list(querystring) {
+        return await this.http.request({
+            url: `/agent/delivery/orders${(0, utils_1.qs)(querystring)}`,
+            method: 'GET'
+        });
+    }
+    async get(reference) {
+        return await this.http.request({
+            url: `/agent/delivery/orders/${reference}`,
+            method: 'GET'
+        });
+    }
+    async accept(reference) {
+        return await this.http.request({
+            url: `/agent/delivery/orders/${reference}/accept`,
+            method: 'POST'
+        });
+    }
+    async updateStatus(reference, body) {
+        return await this.http.request({
+            url: `/agent/delivery/orders/${reference}/status`,
+            method: 'PATCH',
+            body
+        });
+    }
+    async reportIssue(reference, body) {
+        return await this.http.request({
+            url: `/agent/delivery/orders/${reference}/issue`,
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentDelivery;
+//# sourceMappingURL=delivery.js.map

package/dist/allend/Agent/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../../src/allend/Agent/delivery.ts"],"names":[],"mappings":";;AAOA,uCAAgE;AAEhE,iFAAiF;AAEjF,MAAqB,aAAa;IACjC,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,IAAI,CAAE,WAAwD;QACnE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA0C;YACvE,GAAG,EAAE,yBAAyB,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE;YACjD,MAAM,EAAE,KAAK;SACb,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAE,SAAiB;QAC3B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAyC;YACtE,GAAG,EAAE,0BAA0B,SAAS,EAAE;YAC1C,MAAM,EAAE,KAAK;SACb,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAE,SAAiB;QAC9B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4C;YACzE,GAAG,EAAE,0BAA0B,SAAS,SAAS;YACjD,MAAM,EAAE,MAAM;SACd,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAE,SAAiB,EAAE,IAAiD;QACvF,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAkD;YAC/E,GAAG,EAAE,0BAA0B,SAAS,SAAS;YACjD,MAAM,EAAE,OAAO;YACf,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAE,SAAiB,EAAE,IAAgD;QACrF,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAiD;YAC9E,GAAG,EAAE,0BAA0B,SAAS,QAAQ;YAChD,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AAvCD,gCAuCC"}

package/dist/allend/Agent/dispatch.d.ts

@@ -0,0 +1,8 @@
+import type { AgentDispatchRespondValidation, AgentDispatchRateValidation } from '@de./types';
+import { type Http } from '../../utils';
+export default class AgentDispatch {
+    private http;
+    constructor(http: Http);
+    respond(body: AgentDispatchRespondValidation['body']): Promise<AgentDispatchRespondValidation['response']>;
+    rate(body: AgentDispatchRateValidation['body']): Promise<AgentDispatchRateValidation['response']>;
+}

package/dist/allend/Agent/dispatch.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// ─── Agent Dispatch ───────────────────────────────────────────────────────────
+class AgentDispatch {
+    constructor(http) {
+        this.http = http;
+    }
+    async respond(body) {
+        return await this.http.request({
+            url: '/agent/dispatch/respond',
+            method: 'POST',
+            body
+        });
+    }
+    async rate(body) {
+        return await this.http.request({
+            url: '/agent/dispatch/rate',
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentDispatch;
+//# sourceMappingURL=dispatch.js.map

package/dist/allend/Agent/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/allend/Agent/dispatch.ts"],"names":[],"mappings":";;AAMA,iFAAiF;AAEjF,MAAqB,aAAa;IACjC,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,OAAO,CAAE,IAA4C;QAC1D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA6C;YAC1E,GAAG,EAAE,yBAAyB;YAC9B,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAE,IAAyC;QACpD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA0C;YACvE,GAAG,EAAE,sBAAsB;YAC3B,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AAlBD,gCAkBC"}

package/dist/allend/Agent/index.d.ts

@@ -0,0 +1,49 @@
+import type { UserSession } from '../../types/access';
+import type { AgentInfoValidation, AgentAvailabilityValidation, AgentUpdateValidation } from '@de./types';
+import AccessManager from '../Access';
+import AgentRides from './rides';
+import AgentDelivery from './delivery';
+import AgentShipping from './shipping';
+import AgentNavigation from './navigation';
+import AgentConsolidation from './consolidation';
+import AgentReallocation from './reallocation';
+import AgentDispatch from './dispatch';
+import AgentOrigin from './origin';
+import AgentRealtime from './realtime';
+export type AgentConfig = {
+    context: string;
+    accessToken: string;
+    env?: 'dev' | 'staging' | 'prod';
+    platform?: 'web' | 'mobile' | 'server' | 'proxy';
+    remoteOrigin?: string;
+    /** Per-request deadline in ms. See `AccessOptions.timeout`. */
+    timeout?: number;
+    /** Explicit service origin, overriding the env table. See `AccessOptions.baseUrl`. */
+    baseUrl?: string;
+    /** Host to substitute for `localhost` in `dev` (Eg. a native emulator) */
+    devHostname?: string;
+    /**
+     * The signed-in rider.
+     *
+     * Required in practice: AUX agent routes authenticate the caller with
+     * `isConnected` + `isAgent`, which read `de-auth-token` / `de-auth-device`
+     * and ignore the bearer token entirely. Without this, every call here
+     * fails authorization no matter how valid the access token is.
+     */
+    session?: UserSession;
+};
+export default class Agent extends AccessManager {
+    readonly rides: AgentRides;
+    readonly delivery: AgentDelivery;
+    readonly shipping: AgentShipping;
+    readonly navigation: AgentNavigation;
+    readonly consolidation: AgentConsolidation;
+    readonly reallocation: AgentReallocation;
+    readonly dispatch: AgentDispatch;
+    readonly origin: AgentOrigin;
+    readonly realtime: AgentRealtime;
+    constructor(config: AgentConfig);
+    info(): Promise<AgentInfoValidation['response']>;
+    update(body: AgentUpdateValidation['body']): Promise<AgentUpdateValidation['response']>;
+    availability(status: AgentAvailabilityValidation['params']['availability']): Promise<AgentAvailabilityValidation['response']>;
+}